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Bureau of Rehabilitation Services: Procurements for Consumers 



EXECUTIVE SUMMARY 



Bureau of Rehabilitation Services: Procurements for Consumers 

— Weak Controls Allow Misuse of Funds, Affecting Resources Available to 
Serve All Consumers 



Purpose 

The Bmeau of Rehabilitation Services (BRS) is located within the Department of 
Labor (DOL). Its mission is to provide fuU access to employment, independence 
and community integration for people with disabilities. The majority of Bureau 
expenditures are for vocational rehabilitation (VR) services. VR services are 
governed by the federal Rehabilitation Act of 1973 and are intended to assist 
disabled individuals in achieving gainful employment. BRS provides these services 
through the Division for the Blind and Visually Impaired (DBVI), which 
exclusively serves blind and visually impaired persons, and the Division of 
Vocational Rehabilitation (DVR), which serves all others. 

Each year, approximately 11,000 VR cases are in open status at DVR and DBVI 
combined. In State Fiscal Year (SPY) 2006, DVR and DBVI spent $10 miUion to 
procure a variety of goods and services for their consumers with the goal of helping 
them achieve employment. 

Significant internal control weaknesses in BRS' procurement process had been 
noted in past audit reports by both the State Auditor and an independent 
consultant hired by BRS. BRS had worked to implement recommendations from 
these audits, but no comprehensive review had been conducted to gauge whether 
the internal control system had been sufficientiy strengthened. 

Given the past concerns and magnitude of expenditures involved, the Government 
Oversight Committee (GOC) directed the Office of Program Evaluation and 
Government Accountability (OPEGA) to determine whether internal controls for 
BRS VR programs are now adequate. OPEGA focused on current procurement 
processes and practices at DVR and DBVI, as well as transactions for SPY 2004 — 
2006. 



BRS provides VR 
services for Maine 
citizens with disabilities 
in accordance with the 
federal Rehabilitation 
Act of 1973. 



OPEGA sought to 
determine whether 
internal controls over 
procurements for 
consumers were 
adequate. 



Conclusion 

Despite actions taken by BRS to address past concerns, internal controls are still 
not adequate to assure expenditures for DVR and DBVI consumers are 
appropriate, reasonable, properly approved or accounted for. Consequentiy, 
OPEGA's review fotind instances of the misuse of funds, including apparent fraud. 



OPEGA concluded 
controls are weak and 
found instances of 
misuse of funds. 
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Bureau of Rehabilitation Services: Procurements for Consumers 



Findings and Action Plans 



BRS and the Service 
Center have connnnitted 
to significant actions to 
address OPEGA's 
findings. 



OPEGA has noted a number of serious findings as a restilt of this audit. In 
response to these findings, BRS and the Security and Employment Service Center^ 
devoted significant attention and resources to designing a complete system of 
internal controls that will adequately protect State resources while maintaining the 
integrity of BRS' mission and support its service improvement goals. BRS and the 
Service Center have committed to a variety of actions which OPEGA agrees 
should adequately address the concerns noted. These actions should also result in 
improved consumer outcomes and increased resources available to serve additional 
consumers. 



Findings 



IVIanagement Actions 



1. 


Weak control environment 


A. 


Implement revised procurement process by July 2008. 


2. 


Instances of misuse of funds, 


B. 


Strengthen written policies and procedures by 




including apparent fraud 




September 2008. 


3. 


Inadequate policies and procedures 


C. 


Establish necessary computer controls in ORSIS^ by 




to support proper stewardship of 




Spring 2008. 




resources 


D. 


Implement redesigned case review system by January 


4. 


Inadequate separation of duties for 




2008. 




purchase transactions 


E. 


Initiate monitoring of ORSIS data to identify transactions 


5. 


Insufficient verification of 




or cases with risk indicators by March 2008. 




expenditures 


F. 


Conduct semi-annual Service Center audits of BRS 


6. 


Poor documentation to support 




procurement transactions beginning January 2008. 




expenditures 


G. 


Develop and conduct training programs for all employees 


7. 


Lack of computer controls 




by December 2008. 




H. 


Incorporate compliance with all fiscal and program 








requirements into performance reviews for all staff by 








June 2008. 






1. 


Complete comprehensive review, by February 2008, of 








other higher risk cases identified by OPEGA but not 








already examined in this review. 



We also observed that BRS may be able to increase resources available for all 
constimers by consistentiy asking consumers to contribute financially, if able, 
toward their own plans. In addition, centralizing the ORSIS computer servers 
could increase efficiency at BRS and reduce errors in ORSIS data. 



For additional details, see the full OPEGA report. 



^ The Security and Employment Service Center is a unit of the Division of Financial and 
Personnel Services located within the Department of Administrative and Financial Services. 
It provides accounting and financial services support to BRS. 

2 The Office of Rehabilitation Services Information System (ORSIS) is the primary application 
supporting VR services. ORSIS is used for federal reporting, tracking consumer progress 
and case expenditures, budgeting and procurement. 
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FULL REPORT 



Bureau of Rehabilitation Services: Procurements for Consumers 

— Weak Controls Allow Misuse of Funds, Affecting Resources Available 
to Serve All Consumers 



Purpose 



BRS provides VR 
services in accordance 
with tine federal 
Rehabilitation Act of 
1973. These services 
help disabled Maine 
citizens achieve gainful 
employment. 



In the past, auditors 
noted significant 
weaknesses in controls 
over procurement of 
goods and services for 
consumers. 



BRS had taken action on 
these prior findings and 
OPEGA sought to 
determine whether 
controls are now 
adequate. 



The Maine Legislature's Office of Program Evaluation and Government 
Accountability (OPEGA) has completed a performance audit of procurements for 
consumers served by the Bureau of Rehabilitation Services. OPEGA conducted 
this audit at the direction of the joint legislative Government Oversight Committee, 
in accordance with 3 MRSA §§991-997 and the Government Auditing Standards 
set forth by the United States Government Accountability Office. 

The Bmeau of Rehabilitation Services (BRS) is located within the Department of 
Labor (DOL). Its mission is to provide full access to employment, independence 
and communit}^ integration for people with disabilities. BRS administers a number 
of programs, but the majority of Bureau expenditures are for vocational 
rehabilitation (VR) services. VR services are governed by the federal Rehabilitation 
Act of 1 973 and are intended to assist disabled individuals in achieving gainful 
employment. BRS provides these services through the Division for the BMnd and 
Visually Impaired (DBVI), which exclusively serves blind and visually impaired 
persons, and the Division of Vocational Rehabilitation (DVR), which serves all 
others. 

Each year, approximately 11,000 VR cases are in open status at DVR and DBVI 
combined. In State Fiscal Year (SPY) 2006, DVR and DBVI spent $10 miUion to 
procure a variety of goods and services for their consumers with the goal of helping 
them achieve employment. 

Significant internal control weaknesses in BRS' procurement process were noted in 
past audit reports by both the State Auditor and an independent consultant hired 
by BRS. BRS had worked to implement recommendations from these audits, but 
no comprehensive review had been conducted to gauge whether the internal 
control system was sufficiently strengthened. 

Given the past concerns and magnitude of expenditures involved, the Government 
Oversight Committee directed OPEGA to conduct this audit. We sought to 
determine whether internal controls for BRS VR programs are adequate to asstire 
that expenditures for consumers are appropriate, reasonable, properly approved 
and accounted for. 
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Bureau of Rehabilitation Services: Procurements for Consumers 



Methods and Scope- 



The audit focused on 

procurement processes 
in DVR and DBVI as well 
as transactions for SFY 

2004-2006. 



OPEGA conducted 
research and analyzed 
transaction data. We 
also examined a 
selected sample of 
higher risk transactions 
in 68 case files for 
appropriateness and 
compliance with policies 
and procedures. 



In performing this audit, we focused on current procurement processes and 
practices at DVR and DBVI, as well as transactions for SFY 2004 - 2006. Our 
work involved reviewing a variety of documents including: 

• the Rehabilitation Act and relevant federal and State regulations; 

• Single Audit Reports from the State Auditor; 

• the 2004 Financial Management Processes Review Report by independent 
consultant Berry, Dunn, McNeil and Parker; 

• reports restilting from similar audits of VR agencies in other states; and 

• BRS policies, procedural directives, training materials and the 2005-2006 
Highlights Report. 

We also: 

• interviewed staff at various BRS field offices and the Service Center, as well 
as key informants from other organizations; and 

• documented procurement processes and associated risks and internal 
control activities. 

In addition, we analyzed three years of transaction data from BRS' Office of 

Rehabilitation Services Information Services (ORSIS) system and the Maine 
Financial & Administrative Statewide Information System (MFASIS) to identify 
potential inappropriate expenditures or unusual procurement trends. We selected a 
limited sample of transactions in 68 case files identified as higher risk^ during that 
data analysis and examined them for evidence of appropriateness and compliance 
with procurement-related policies and procedures. 



3 Certain types of indicators, i.e. large payments made directly to consumers, or existence of 
multiple indicators made cases higher risk. 
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Bureau of Rehabilitation Services: Procurements for Consumers 



Background- 



What are VR services and how are they funded? 

The vocational rehabilitation services provided by BRS are comprehensive and 
varied, going beyond those fotind in routine job training programs. They can 
include: 



VR services are more 
comprehensive and 
varied than those in 
routine job training 
programs. 



Federal grants fund 

most of these services 
and require a State 
General Fund match of 

about 21%. 



In SFY04-06, DVR and 
DBVI spent about $26.5 
million procuring goods 
and services for 
consumers, an average 
of $8.8 million per year. 



functional assessments; 

job development and coaching; 

work evaluations; 

medical and therapeutic services; 

miscellaneous goods; 

provision of assistive technology or eqtiipment and associated training; and 

financial assistance for post-secondary education, vocational training, 
transportation, self-employment business planning and start-up, and 
maintenance expenses such as occasional rent and interview clothing. 



Most of DVR and DBVI's VR services are funded by annual federal grants from 
the Rehabilitation Service Administration's (RSA) Vocational Rehabilitation 
Program. These grants require a State General Fund match of about 21%. The 
Bureau also receives several smaller federal grants, program income from the Social 
Security Administration and State allocations. 

In the three years reviewed by OPEGA, DVR and DBVI spent approximately 
$26.5 million purchasing goods and services for constimers, an average of about 
$8.8 million per year. The highest categories of expenditures were: 

• job development, supports, training and related services; 

• functional assessments of job-related implications of consumer disabilities; 

• post secondary education; and 

• transportation and maintenance. 
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How does BRS deliver VR services? 



In Maine, VR services 
are delivered through 
two separate agencies - 
DVR and DBVI - 
overseen by the BRS 
central office. DVR is 
significantly larger than 
DBVI. 



DVR and DBVI have 
offices statewide, the 
majority of which are 
located together. These 
offices are also co- 
located with DOL's 
Career Centers. 



VR services are 
delivered or coordinated 
by Vocational 
Rehabilitation 
Counselors supported by 
supervisors. VRCs carry 
caseloads of about 120- 
140 consumers. 



Bureau of Rehabilitation Services 



Division for the Blind 
and Visually Impaired 



Division of Vocational 
Rehabilitation 



Ellsworth 
Office 



Maine is one of twenty-four states that delivers VR services through two separate 
agencies. DVR and DBVI are considered separate entities by the federal RSA. 
Each receives a federal grant from, submits an Annual Plan to, and is evaluated 
separately by, RSA. The BRS central office oversees DVR and DBVI as well as the 
Division of Deafness. The central office maintains and analyzes data for federal 
reporting. 

Figure 1. BRS Organizational Units Directly invoived in Delivering 
Statewide there are 10 Vocationai Reiiabiiitation Services 

DVR offices, six of which 
also house a DBVI office. 
A seventh DBVI office is 
located separately. Figure 
1 illustrates the location of 
these offices, all of which 
are co-located with a DOL 
Career Center. 

DBVFs 35 person staff 
includes the Director, and 
10.5 Vocational 
Rehabilitation Counselors 
(VRC) overseen by 3 
regional supervisors. In 
addition to VR, and 
outside the scope of this 
audit, DBVI administers 

the Independent Living Program for Older Blind Adults as well as the Business 
Enterprise Program. It also provides assistance to local school systems through the 
Blind Children's Education Program. 

DVR's staff of 107 is significantly larger, with 64 VRCs, 9 supervisors and 2 
regional managers. This Division also coordinates the Bureau's in-state 
accreditation process for private Community Rehabilitation Providers (CRP) 
serving both DVR and DBVI consumers. CRPs are vendors that provide job 
development, job coaching and job supports to BRS consumers. 

VR services are delivered or coordinated by VRCs carrying caseloads of 
approximately 120-140 consumers. Delivering these services effectively requires 
high quality professional judgment by VR counselors with support and coaching 
from their supervisors. VRCs are required by RSA to meet specific educational 
standards upon employment (a Masters Degree in VR counseling), or have a 
specific plan to attain their degrees while employed. 




Rockland 
Office 
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Both Divisions inave liaci 
wait lists for eligible 
persons. DVR has been 
working to reduce the 
length of its, which is 
much longer than 
DBVI's. 



The provision of VR 

services is supported by 
the ORSIS system where 
procurements for 

consumers are initiated. 



In spite of high caseload sizes, both DVR and DBVI have historically had a wait 
Mst in effect for persons found to be eligible. For the past 3 years, BRS has worked 
diligently to reduce the wait list length. These efforts have yielded results. DVR's 
wait list has been reduced by more than 50%, from a high of 12 months to less 
than 6; generally fluctuating between 4.5 and 5.5 months. DBVI's wait list is much 
shorter, about 60 days, and is often invisible to consumers who can begin to receive 
services soon after eligibility has been determined. 

BRS has developed its own in-house information system, ORSIS, to facilitate 
federal reporting requirements and track consumer progress and individual case 
expenditures. Procurement transactions for consumer goods and services begin 
with data entered into ORSIS. ORSIS also tracks budget information and 
obligations, maintains information on consumer demographics, and tracks case 
status and outcomes by caseload and by office. 



VR programs serve 
persons with myriad 
barriers to employment 
and frequently changing 
circumstances. 



VRCs determine 
eligibility, develop 
Individual Plans for 
Employment with 
consumers, assess 
progress and decide 
when to close cases. 



What is the Vocational Rehabilitation process? 

By federal law, VR programs are highly individualized, serving persons with myriad 
barriers to employment and frequently changing medical, psychological and 
economic circumstances. Counselors are responsible for: 

determining eligibility; 

completing a Comprehensive Assessment of Rehabilitation Needs; 
developing Individual Employment Plans (IPE) with consumers; 
providing consumers with a selection of vendors to choose from; 
assessing progress; 
amending IPEs when necessary; and 

deciding when to close cases as successful or unsuccessful. 

They are also responsible for ensuring each case and the case record is in 
compliance with the Rehabilitation Act and associated federal regulations, as well as 
State VR program policies. Figure 2 depicts the flow of the entire VR process. 

Consumers who question or disagree with the BRS decisions regarding their cases 
have the right to appeal at any point. All public sector VR programs are required 
to have an independent, associated Client Assistance Program to handle consumer 
complaints and appeals. Appealed decisions may be upheld or overturned but, 
regardless, the consumer is afforded the free support of an advocate to assist them 
in the process. 

Sometimes, a consumer is found eligible for services, and may begin receiving 
them, but circumstances develop that render the consumer no longer able to 
benefit from vocational services. In these instances, a VR decision is made to close 
the case and these consumers are also informed of the appeal process. 
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Figure 2. Vocational Rehabilitation Process 



Application and Eligibility Determination 



Eligible - Order of Selection Category I 
Wait List 



Comprehensive Assessment 
of Rehabilitation Needs 



Development of Individualized Plan for 
Employment (IPE) 



IPE Implementation 

DVR provides consumer with counseling, training, 
education, transportation, supported employment and 
other goods/services to meet vocational goals. Most 
purchases for consumers are made during IPE 
implementation. 



IPE Amendments - I f ne cessary 



Unsuccessful Closures 

Cases are closed for a 
variety of reasons: 

• Found not eligible 

• Decides to leave the 
program at any point in 
the process - while on 
wait list, before IPE 
developed, after IPE 
developed 

• Refuses to cooperate 
or can't be located 

• Shown to be unable to 
benefit from VR 
services 

The Rights of Appeal are 
given to all applicants 
as well as contact 
information for the 
Client Assistance 
Program (CAP) 



Successful Case Closure 

Once individual has worked successfully in an integrated setting for at least 90 days, or 
for self-employment, earning income at or above minimum wage and income projections 
have been met or exceeded. 



Post Employment Services - If necessary 



Eli£Sibilitv 



The VR process begins 
with a completed 
application for services. 
VRCs determine whether 
applicants are eligible 
according to criteria 
established by federal 
regulations. 



The rehabilitation process for consumers at both DBVI and DVR is fundamentally 
the same. It begins with an individual filling out an application requesting services. 
Within 60 days of receiving a signed application, a VRC determines eligibilit}'. BRS 
provides vocational rehabilitation services in accordance with federal regulations 
governing RSA's Vocational Rehabilitation Services Program. To be eligible for 
services under this program, a person must: 

• have a physical or mental impairment that substantially impedes 
employment; 

• be able to benefit from VR services in terms of employment; and 

• require VR services to prepare for, enter, engage in, or retain employment. 
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The number of VR 
consumers with mental 
health and cognitive 
disabilities has been 
increasing. 57% of 
those served in Maine's 
VR programs in 2005- 
2006 had these 
disabilities. 



In Maine, and nationally, there has been an increase in the number of individuals 
accessing VR services with mental health and cognitive disabilities. Figure 3 shows 
a breakdown of the major 
disabling conditions served in 
DBVI and DVR in 2005.^ 

Maine is one of the states with 
inadequate resources to serve 
all eligible consumers who 
apply. The Rehabilitation Act 
requires states in this situation 
to use an Order of Selection 
(OOS) to prioritize those 
applicants with the most 
severe disabilities. Counselors 
are responsible for assigning a 
priority category. Currently in 
Maine, only individuals in 

Category I receive services. Individuals assigned Category II and III are provided 
with information and referral services. 



Figure 3. Major Disabling Conditions Served in 
VR Programs in 2005. 




^ Blind and visually impaired 


Mental illness 


/ 10% 


32% 

f 


Jl^^ Deaf/hard of hearing 

\ / Physical 

\ / 26% 


Cognitive 




25% 





Consumers work with 
their VRC to assess their 
rehabilitation needs and 
develop an Individual 
Plan for Employment. 
Acceptable goals include 
a job with an employer, 
self-employment or, in 
the case of DBVI, 
homemaker. 



Comprehensive Assessment/Individual Plan for Employment 

The vocational rehabilitation program is designed to maximize consumer 
involvement in determining a vocational goal and achieving it. Consumers work 
with their VRC to complete a Comprehensive Assessment of Rehabilitation Needs. 
This assessment includes an identification of strengths, work history, preferences, 
career needs and a vocational goal. Following the assessment, the consumer and 
counselor develop an Individual Plan for Employment (IPE). The IPE is a written 
plan with specified services and supports necessary to achieve a vocational goal. 
Usually, the goal is a job in the general employment market at a standard rate of 
pay. Other acceptable employment goals include self-employment or, in the case 
of DBVI, homemaker. 

The homemaker goal is unique to DBVI consumers, 55% of whom were over 65 
years of age in SFY 2006. Many of them were homemakers prior to developing a 
visual impairment and they do not desire outside paid employment. In these cases, 
the IPE focuses on helping the consumer be self-sufficient at home. In SFY 2006, 
75% of DBVI's successful closures were homemakers.' 



In contrast, DVR consumers are typically much younger. In SFY 2006, 63% were 
between 23-54 years of age while 31% were under 23 years. Many of the younger 
consumers come to DVR while preparing to transition from high school special 



IViaine Department of Labor, Bureau of Rehabilitation Services 2005-2006 Highlights 
Report. 

5 Ibid. 

6 Ibid. 
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education programs to employment. In many of these cases, financial assistance 
with post-secondary education is a key component of the IPE. 

IPE Implementation 



VRCs coordinate and 
monitor services 
necessary to reacln 
employment goals. 
These may include job 
development, coaching 
and placement services 
that are purchased from 
Community 

Rehabilitation Providers. 



Most expenditures for 
consumers are for CRP 
services. Many 
consumers also receive 
a variety of other goods 
and services. One 
growing category of 
expenditures is post- 
secondary education. 



During IPE implementation, counselors coordinate and monitor services necessary 
to reach an individual's vocational goal. Job development, coaching, placement and 
supported employment services are purchased from outside Communit}^ 
Rehabilitation Providers. Figure 4 illustrates the roles of counselor, consumer and 
CRP. 

Figure 4. Roles in tine Vocational Rehabilitation Process 



Community 

Rehabilitation Providers 
(CRP) are one type of 
vendor that may be 
involved in a 
consumer's vocational 
rehabilitation. They 
typically provide 
services I Ike job 
development and job 
coaching. 



CRP Services 

Educational 
Opportunities 

Technological 
Supports 

Medical Services 

Misc. Goods 





CONSUMER 


COUNSELOR 




Preferences 
Needs 
Plans 


Tools 
Resources 
Support 












Individual Plan for Employment 



CRPs report regularly to the vocational rehabilitation counselors who are also in 
contact with consumers. Most VR expenditures for consumer services are for CRP 
services. Consumers may receive a variety of other services or goods necessitated 
by the IPE, such as costs of clothing for a job interview or travel necessary for 
participation in a VR service or to go to school. One growing categor^r of 
expenditures is post-secondary education, reflecting current labor market needs for 
educated employees. 
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Case Closure 



Cases are closed as 
successful when 
consumers have held 
jobs for 90 days or met 
their self-employment 
income or homemaker 
goals. 



For a variety of reasons, 
many cases are also 
closed as unsuccessful 
prior to the consumer 
completing the VR 
process and achieving 
an employment goal. 



A case can be closed as successful once a consumer has worked at a job for at least 
90 days, or met or exceeded their self-employment income or homemaker goals. 
For a short dme, BRS can also provide post-employment services for individuals 
needing limited assistance to retain, regain or advance in employment. Constimers 
may also return to the program as new cases if their situation changes. 

There is no limit for how long a case may remain open. Successful DVR cases are 
currentiy taking an average of 36 months to move from application to closure. 
This represents an increase over 2003 of 5 months, partially due to time spent on 
the wait list and in IPE development^. Successful DBVI cases currentiy move 
from application to closure in about 29 months. 

Many cases are closed prior to completing the VR process and achieving an 
employment goal. Cases are closed unsuccessfully when applicants are determined 
to be ineligible, leave while on the wait Ust, decide not to work on an IPE, are 
tincooperative, cannot be located or are found to be unable to benefit from VR 
services. Other factors can also impact the rate of unsuccessful closures and the 
length of time cases remain open. These include: 

• staff turnover; 

• Maine's tinemployment rate; 

• the availability of appropriate employment opportunities; and 

• the regional economy. 

DVR served 10,620 individuals during SPY 2005 and closed 2,847 cases. Of tiie 
closed cases, 1,106 were closed prior to an IPE being developed, 715 were closed 
after IPE development and 655 were closed successfully.*^ DBVI served 926 
individuals during the same time period and successfully closed 203 cases. 



How are goods and services purchased for consumers? 



DVR and DBVI use four 
processes to procure 
goods and services for 
consumers. Consumers 
are involved in selecting 
the vendors. 



DVR and DBVI use four procurement processes to ptirchase goods and services 
for consumers: standard, manifest, reimbursement and advance. The ORSIS 
system supports these processes by functioning as a ptxrchasing and accounts 
payable system. 



^ Division of Vocational Rehabilitation Services 2006 Annual Plan Draft. 
8 Ibid. 



Office of Program Evaluation & Government Accountability 



page 11 



Bureau of Rehabilitation Services: Procurements for Consumers 



Standard Process 



In the standard process, 
expenditures are 
approved prior to 
purchase, orders are 
placed and payment Is 
made directly to vendors 
after the good/service 
has been provided. 



BRS' standard process for procuring goods or services for consumers begins with 
the counselor determining a purchase is necessary to: 

• help ascertain consumer eligibility and strengths or limitations; 

• develop the IPE; or 

• meet the consumer's vocational goal specified in the IPE. 

If the needed service is one provided by CRPs, the consumer selects a CRP from a 
list provided by the counselor. Only BRS-approved vendors can be used for CRP 
services. Pay rates for these services are set by BRS and included on the vendor 
Ust. Consumers choose non-CRP vendors, such as post-secondary schools, 
department stores, vehicle repair shops, etc., in consultation with VRCs.^ 



The purchasing process 
uses forms in ORSIS 
called R20s. R20s 
initially serve as 
purchase orders - 
initiated by VRCs, 
completed in ORSIS, 
printed, signed and sent 
to vendors. 



After providing goods or 
services, vendors sign 
and return the R20 
which now becomes an 
invoice. The R20 is 
approved and then 
payment is initiated in 
ORSIS. 



The purchasing process is part manual and 
part electronic using forms in ORSIS called 
R20s. R20s serve as purchase orders. They 
are initiated by VRCs, completed in ORSIS 
and then printed. The printed copies must be 
signed by support staff, the case counselor, 
another counselor or a supervisor prior to 
being sent to vendors. After the 
goods/ services are provided, vendors sign 
and return the original R20s which now serve 
as invoices. Separate vendor invoices or 
reports may also be provided with these 
documents. The case counselors verify, with 
the constimers, satisfactory receipt of aU 
goods or services and then sign the R20s 
approving payment. If the case counselor 
signed the R20 before it was sent to the 
vendor, a different person must sign at this 
time to approve payment. 



BRS Procurement Processes: 

Standard 

BRS approves individual 
expenditure prior to purchase 
and later confirms receipt. 

IVIanifest 

BRS approves a series of 
future automatic payments to 
consumers. 

Reimbursement 

BRS approves reimbursement 
for a purchase the consumer 
has already made. 

Advance 

BRS approves payment to a 
consumer in advance of a 

■■■liiiiiii^ 



Typically, support staff then enter the payment information in ORSIS and send the 
hard copies of the signed R20s via interoffice mail to the Security and Employment 
Service Center^" within the Department of Administrative and Financial Services 
(DAPS) where they are filed. 

Each day, payment R20 transactions entered into ORSIS from every BRS office are 

electronically batched within the Bureau of Rehabilitation Services Information 
System (BRSIS). Service Center staff electronically puU the batch of transactions 



9 DBVI also has an annual contract with The IRIS Network to provide consumer services not 
covered in this audit. 

10 The Security and Employment Service Center is a unit of the Division of Financial and 
Personnel Services within DAFS. It provides accounting and financial services support to 
BRS. 
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Each day the Service 
Center transfers 
electronic payment 
transactions entered in 
ORSIS to IVIFASIS. 
IVIFASIS generates 
checks which are 
disbursed directly to 
vendors or consumers. 



and review it for compatibilit}^ with the Maine Financial and Administrative 
Statewide Information System (MFASIS)." This review involves checking that the 
vendors to be paid exist in the MFASIS vendor database and that Employment 
Identification Numbers are included in the electronic record where required. The 
Service Center then transfers the payment data from BRSIS into MFASIS. 
MFASIS processes this data and generates checks which are disbursed directly to 
vendors or consumers. Figure 5 illustrates the flow of transactions from ORSIS to 
MFASIS. 

Figure 5. Flow of Transactions for Purchases of Consumer Goods and Services 



BRS Systems 



ORSIS 



M IVIaintains vocational ^ 
B'ehabilitation case data 



Case Activity Data 

Case Notes 
Consumer Data 
Obligation Detail 
Budgetary Detail 
Expenditure Detail 



BRSIS 

10' Batches I 
expenditures 

< 



Limited 
Expenditure 
Transaction Data 



DAFS Systems 
MFASIS 

Processes accounting 
transactions & 
produces checks ^ 

Limited Expenditure 
Transaction Data 



Only procurements for 
consumer goods and 
services are processed 
through ORSIS. All other 
BRS procurements are 
processed by the 
Service Center in 
accordance with regular 
State procedures and 
controls. 



It is important to note that procurements for consumer goods and services are 
processed differently than other BRS procurements. Transactions for expenditures 
related to employee travel and expenses, administrative supplies, etc. go through 
regular State procurement procedures at the Service Center rather than through 
ORSIS. Two or three levels of approval are required and the Service Center 
assures each payment document is adequately supported by other authenticated 
documentation (original invoices, purchase orders, etc.) before a check is issued. 
However, DAFS allows certain departmental information systems, including 
BRSIS, to interface with MFASIS directly without transactions going through 
additional review at the Service Center. It is assumed the necessary controls are in 
place in the individual departments where the transactions originated. 



Group Purchases 

The standard procurement process is also used for grouped purchases, primarily by 
DBVI. A number of items, such as canes, are purchased for a "group" consumer 
and disbursed as needed to individuals. Services, such as mobility and orientation 
instruction, may also be charged to group consumers although instructors t}'pically 
do show the hours spent with each individual consumer on their invoices. Table 1 
shows the number and dollar amount of group purchases for the three years 



reviewC' 



d. 



11 As of July 1, 2007, MFASIS was replaced by AdvantageME. 



Office of Program Evaluation & Government Accountability 



page 13 



Bureau of Rehabilitation Services: Procurements for Consumers 



Goods and services may 
also be procured in 
group purciiases tfiat 
are not associated witli 
specific consumers in 
ORSIS. 



Goods and services procured as a group are processed in ORSIS under specially 
established group identification numbers rather than the identification numbers for 
specific consumers being served. Paper copies of group purchase invoices may be 
included in the manual case files maintained for the individual consumers served, 
but these transactions and associated costs are not captured in the electronic case 
records maintained in ORSIS for these consumers. 



Table 1. Dollar Amount and Number of Group Purchases by Division and SPi' 



SFYof 


DBVI 


DVR 


Total 


Payment 


$ 


# 


$ 


# 


$ 


# 


2004 


$92,128 


314 


$8,647 


36 


$100,775 


350 


2005 


$151,388 


281 


$802 


10 


$152,190 


291 


2006 


$222,623 


361 


$360 


2 


$222,983 


363 


Grand Total 


$466,139 


956 


$9,809 


48 


$475,948 


1004 



BRS uses tlie manifest 
process to establish 
recurring payments. 
Only one person, 
typically the VRC, needs 
to sign the printed 
copies of the R20s. 



Manifest Process 

Manifests are used to generate payments for a regularly recurring consumer need 
determined by the counselor, for example, the weeldy cost of gasoline to attend a 
semester of school. A manifest authorization specifies the payment amount and 
the dates payments will be issued. Counselors authorize and approve the manifest 
R20s which are established in ORSIS. The electronic transaction is transferred to 
MFASIS and checks are automatically issued for the time periods established. 
Manifest payments are typically made to non-CRP vendors or direcdy to the 
constimer. Table 2 shows the number and dollar amount of manifest payments for 
the three years reviewed. 



Table 2. Dollar Amount and Number of Manifest Payments by Division and SFY 


SFYof 


DBVI 


DVR 


Tota 


1 


^ Payment 


$ 


# 


$ 


# 


$ 


# 


2004 


$1,750 


9 


$377,228 


5203 


$378,978 


5212 


2005 


$620 


9 


$340,556 


5057 


$341,176 


5066 


2006 


$1,510 


32 


$334,192 


4639 


$335,702 


4671 


Grand Total 


$3,880 


50 


$1,051,976 


14899 


$1,055,856 


14949 



Reimbursements are 
used to pay for items 
consumers have already 
received. Advances 
provide funds to 
consumers prior to 
purchases being made. 



Reimbursement and Advance Processes 

The reimbtirsement process is used to pay for an item(s) the consumer has already 
received. Payment may be made to the vendor or direcdy to the consumer. The 
counselor determines whether the item was necessary to meet the vocational goal 
and, if so, asks the consumer or vendor to provide a receipt. A R20 authorization 
is created in ORSIS and usually signed by support staff. Since the purchase has 
been made and there is a receipt, the counselor then signs the R20 to approve 
payment. As in the standard process, the payment transaction is initiated in ORSIS 
and transferred to MFASIS with the Service Center issuing the check. 
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These payments are 
typically made directly to 
consumers who must 
provide the VRC with 
receipts to support their 
purchases. 



BRS uses the advance process to provide funds to consumers prior to a purchase 
being made. Counselors decide a good/ service is necessary to achieving the 
vocational goal and authorize an amount. The authorizing R20 is tjrpically signed 
by support staff and then signed by the counselor to approve payment. The 
payment transaction is entered to ORSIS and transferred to MFASIS. The Service 
Center issues payment directiy to the consumer who is expected to provide receipts 
for purchases made, and to refund any change from the purchase, to the counselor. 
Advances may also be used when particular vendors will not accept BRS R20s as 
purchase orders, and in other situations determined appropriate by counselors. 



In the past, the State 
Auditor and a consultant 
identified internal 
control weaknesses in 
BRS' financial 
management system, 
including processes for 
procuring consumer 
goods and services. 



What prior concerns existed with BRS procurement processes and how 
have they been addressed? 

~ For several consecutive years, the State Auditor reported Single Audit findings 

regarding inadequate financial controls in BRS. In response to these findings, 
DOL hired an outside consultant to conduct a comprehensive review of BRS' 
financial management system. 



In response, BRS began 
making changes to the 
procurement process 
and issuing new policies 
and procedures. 



The report from consultant Berrj', Dunn, McNeil and Parker (BDMP) was 
submitted to BRS in August 2004. Many of the report's 38 recommendations 
addressed internal control weaknesses in the areas of procurement and expenditure 
policies, procedures and practices. BRS began to work on implementing the 
BDMP recommendations related to procuring consumer goods and services. 
Actions included revising the procurement process to require two different 
signatures on paper R20's to complete a purchase transaction - one individual to 
authorize the order and a different one to approve payment. 

BRS also began a review of specific policies and procedures as well as agency 
performance. New policy and procedtiral directives to guide VR staff were issued 
for: 

transportation assistance; 
self-employment; 
post-secondary education; 
consumers with substance abuse; 
incarcerated individuals; 
case closure; and 
high cost or long term cases. 

In the midst of this, BRS discovered a historic expenditure error that resulted in the 
need to obtain an emergency supplemental General Fund appropriation of about 
$2 million. The root cause of the error lay in poor financial data provided to 
management and, consequentiy, the Bureau turned its focus to improving the 
quaHtjr of budget and expenditure information available to Division Directors and 
BRS central management. 



Office of Program Evaluation & Government Accountability 



page 15 



Bureau of Rehabilitation Services: Procurements for Consumers 



The State Auditor has 

continued to find 
internal control 
weaknesses during the 

State Single Audit. 



Since then, BRS has worked closely with the Service Center^^ on reports and 
procedures to routinely monitor division budgets from a high level. Currently, BRS 
and Service Center staff regularly review and compare budget to actual expenditure 
data. Financial reports required by RSA are developed in the Service Center using 
MFASIS data. According to both BRS and Service Center management, these 
reports and budgetary information are now accurate and reliable. 

The State Single Audit for SFY 2005 continued to find that BRS lacked internal 
controls to ensure compliance with allowable cost requirements and the State 
Auditor recommended establishing internal control procedures, implementing 
computer controls and periodically reviewing work performed by rehabilitation 
counselors. These findings are repeated in the recentiy released report for the SFY 
2006 Single Audit that was being conducted concurrent with OPEGA's review. 

BRS also participates in the Department of Labor's Bend the Curve initiative which 
began in 2004. Bend the Curve is a comprehensive planning exercise to assess the 
Department's approach to delivery of services and look for areas of improvement. 
Bend the Curve specifically looks for ways to improve service deliven^ and reduce 
costs — bending the expense curve down in anticipation of declining or flat 
revenues in the future. Unlike most of the Labor Department, and in recognition 
of the Order of Selection and wait list, any savings realized by BRS via Bend the 
Curve are to be utilized to increase the number of persons served. 



What are the internal controls and typical risks associated with a 
procurement process? 

Internal controls are policies, procedures and processes that help to provide 
reasonable assurance the organization: 



Internal controls serve to 
prevent or detect 
undesirable situations 
that could interfere with 
meeting objectives and 
are critical to an 
organization's success. 



• achieves management objectives; 

• promotes effective and efficient operations; 

• produces reliable financial and operational reports; 

• is in compliance with applicable laws, regulations, internal policies and 
procedtires; 

• is protected from the risk of fraud and waste; and 

• provides quality services consistent with the organization's mission. 

Internal controls are critical to the success of an organization's work as they serve 
to prevent or detect undesirable situations (risks) that can interfere with achieving 
organizational objectives. They need to be viewed by managers and employees as 
key to the organization's main function. An effective internal control system is not 
separate from other systems, but rather an integrated component of the entire 



12 In SFY 2006, BRS accounting functions previously performed within the Bureau were 
moved to the DAFS Service Center, along with those of the entire Department of Labor, as 
part of the State's move to centralize financial functions. 
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There are a number of 
standard controls for 
procurement processes 
to guard against a 
variety of inlierent risks 
tliat could lead to direct 
financial loss. 



organization and an important part of everyday responsibilities of management and 
employees. 

In a procurement process, internal controls guard against a number of inherent 
risks that could result in direct financial loss. These controls can be manual, 
electronic or a combination of both, but they are not usually regarded as optional. 
Table 3 lists some of the typical procurement process risks and some of the 
standard controls used to minimize them. Supervisory approvals, separation of 
duties, and checking the quantities and pricing on invoices against orders and 
receipts are often considered key controls. 



Table 3. Typical Risks and Standard Controls in Procurement Processes 



Typical Procurement Risks include 
but are not limited to: 



Fraudulent customers or vendors 

Overpayments for goods/services 

Unnecessary purchases 

Receipt of goods/services by 
persons other than intended 
customer 

Purchases by unauthorized 

individuals 

Employees receiving inappropriate 
payments 

Duplicate payments 



Standard Controls include but are 
not limited to: 



Written procurement policies and 
procedures 

Verification that vendors are valid 

Separation of functions or duties 
so that one individual cannot 
complete a transaction alone 

Supervisory approval of orders 
and/or payments 

Matching quantities and pricing 
on invoices against orders and 
receipt documentation 



Conclusion 



OPEGA concluded 
internal controls are still 
weak and found 
instances of misused 
funds including 
apparent fraud. 



Despite actions taken by BRS to address past concerns, internal controls are still 
not adequate to assure expenditures for DVR and DBVI consumers are 
appropriate, reasonable, properly approved or accounted for. Consequently, 
OPEGA's review found instances of the misuse of funds, including apparent fraud. 

This weak control environment flows, primarily, from the Bureau's predominant 
emphasis on service delivery, consumer satisfaction, and maximizing cotinselor 
authority with regard to case decisions. Counselor relationships with consumers 
are seen as critical to successful outcomes and the organizational culture supports 
counselor control and independence supplemented with supervisory guidance. 
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The weak control 
environment flows from 
BRS' emphasis on 
service delivery and 
maximizing counselor 
authority and flexibility. 
It also reflects 
management's focus on 
improving financial 
management controls 
rather than transaction 
level controls. 



BRS acknowledges its 
stewardship role and the 
control weaknesses 
identified. It has 
committed to significant 
management actions to 
address OPEGA's 
findings. 



Counselors are responsible for a number of critical decisions, including financial 
ones, regarding individual consumers with complex needs and vocational goals. 
BRS supervisors react to counselor requests for assistance in resolving specific 
issues on specific cases, but do not proactively review all cases, or even a sample 
thereof. 

Over the past several years, management has also focused on bringing much 
needed improvements to other fundamental parts of its financial management 
system such as the budget, grant management and cash management. Less 
emphasis has been placed on financial accountability and risk mitigation at the 
transaction level than the other efforts ongoing at BRS. The lack of effective 
controls at the transaction level is especially problematic, however, as the State's 
MFASIS system issues payments based on data provided by BRS' ORSIS system 
with no separate review of each transaction for accuracy and validity. 

While BRS acknowledges its stewardship role, it has not given priority to 
establishing effective controls to support that role. During the course of OPEGA's 
audit, BRS became increasingly aware of internal control weaknesses, the 
ineffectiveness of steps previously taken to address them, and its vulnerability to a 
number of unacceptable risks. BRS has committed to significant management 
actions that reflect this awareness. We believe the restating controls, if folly 
implemented, will appropriately balance the need to minimize financial risk with the 
flexibility needed to serve consumers. They should also result in improved 
consumer outcomes and increased resources available to serve additional 
constamers. 



13 OPEGA does, however, recognize tine State Controller's responsibility for financial controls 
in procurement processes throughout State Government and notes that additional actions 
may be required of BRS by the Controller. 



page 18 



Office of Program Evaluation & Government Accountability 



Bureau of Rehabilitation Services: Procurements for Consumers 



Findings & Observations 



Finding - a situation noted withiin thie scope of tiie review thiat deserves immediate attention and action. 
Observation - a noted opportunity for improving effectiveness or efficiency in an area outside tiie scope of tine review. 



Finding 1 - Weak Control Environment 

'The control environment sets the tone of an organisation, influencing the control consciousness of 
its people. It is the foundation for all other components of internal control; providing discipline and 
structure. Control environment factors include integrity and ethical values, commitment to 
competence, management participation, management philosophy and operating style, organisational 
structure, assignment of authority, and human resource policies and practices. " ^'^ 

BRS and Service Center management have not met their responsibility to create an 
adequate control environment for the procurement of consumer goods and 
services at DVR and DBVI. This is evidenced by the conditions discussed in 
Findings 2-7. 

In any organization, management is responsible for establishing and maintaining an 
effective control environment as part of its stewardship over the use of resources. 
It must "set the tone" to enable effective controls to be instituted and used 
properly by all employees. Management is also responsible for monitoring 
activities, assessing risk and striking an appropriate balance between the need to 
control risk and the need to provide services efficiently and flexibly. Finding this 
balance can be difficult. Controls may be perceived as inhibiting service delivery 
by, for example, increasing the time it takes to deliver a service or good to one's 
consumers. Systems designed to optimize customer service may operate at the 
expense of critical internal controls. 

Over the years, BRS has emphasized reducing the wait list, expediting payments, 
improving consumer satisfaction and maintaining counselor independence and 
flexibility over standardization and controls. These choices mean that financial 
risks associated with the procurement process remain largely uncontrolled and BRS 
is vulnerable to fraud and other misuse of funds as a result. Interestingly, the weak 
control environment may also be contributing to the perception, if not the reality, 
of inequitable treatment of consumers. The availability of particular goods and 
services, and the manner in which they may be obtained, may vary by counselor or 
by office. 

BRS and the Service Center have worked diligently to address past weaknesses 
noted in budgetary and cash management processes, but actions taken to address 



1* Office of Vocational and Educational Services for Individuals with Disabilities (VESID) 
Internal Controls Over the Procurement of Goods and Services for the Period 1/1/00- 
6/30/04, University of the State of New York, The State Education Department, Office of 
Audit Services, 2004 ( http://oms33.nvsed.gov/press/090704attachmt.htm ). 
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weaknesses in the procurement process were more limited. Those actions taken 
did not fully address the weaknesses for various reasons that were apparently 
unrecognized by management. For example, the BDMP report recommended 
separating duties by requiring a second approval on purchase transactions, 
preferably that of a supervisor. DVR and DBVI determined requiring supervisory 
approval would significantly hinder operations and instead required that two 
different individuals, who could be counselors and support staff, sign the paper 
R20s used for authorizing orders and payment of invoices. OPEGA found this to 
be an ineffective control. Counselors actually retained the abiHty to control whole 
transactions due to the nature of their relationships with peers and support staff 
and ORSIS lacked sufficient controls. (See Findings 4 and 7). Without any other 
compensating controls in place, duties were still not effectively separated. 

OPEGA notes that the degree of financial risk associated with the weak control 
environment is lower at DBVI than DVR. DBVI serves fewer consumers with a 
smaller staff and DBVI consumers do not have the same diverse range of 
disabilities as DVR consumers. Consequentiy, DBVT's somewhat different 
approach to serving consumers keeps risk lower despite weak controls. For 
example, OPEGA's data analysis showed that certain types of purchases with 
higher inherent risk occurred more frequentiy at DVR than DBVI - 99% of the 
22,730 payments made directiy to consumers during SFY 2004 - 2006 went to 
DVR consumers, while only 1% went to DBVI consumers. Nonetheless, 
establishing a more effective control environment in both Divisions wiU improve 
management's ability to safeguard assets and responsibly steward public resources, 
while providing quality services in a fair and equitable manner. 

See Actions A-I in the Management Actions section of this report for 
management's commitments to addressing this finding. 

Finding 2 - Misuse of Funds Including Apparent Fraud 

Misuse is the incurring of unnecessary or careless expenditures of public resources or property 
resultingfrom deficient practices, systems, controls, or decisions. Fraud is defined as a dishonest 

and intentional course of action that results in obtaining money, property, or an advantage to which 
the individual committing the action would not normally he entitled. 

Lack of internal controls over procurements for consumers at DVR and DBVI 
resulted in the misuse of funds including instances of apparent fraud. OPEGA's 
analysis of SFY 2004-2006 expenditures identified one or more transactions in 
2,181 different cases that had indicators of potential for fraud or misuse of funds. 
OPEGA selected transactions in 68 of the higher risk cases^^, representing 
$577,979 in expenditures, for detailed review. Cases within the sample that 
OPEGA still deemed suspicious after its review were further examined by BRS. 



15 Certain types of indicators, i.e. large payments made directly to consumers, or existence 
of multiple indicators made cases higher risk. 
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As a restalt of this process, BRS confirmed cases of apparent fraud involving three 
employees. These cases have been referred to the Attorney General's Office for 
criminal investigation. 

BRS also agreed that 12 other cases had some degree of misused funds, potential 
fraud or both. In one extreme case, a consumer directly received $17,150 in a 
single payment to purchase equipment and services to start a new business. One 
month later another $343 was provided. The case file included a hand written list 
of equipment and other projected costs (insurance, advertising), but no other 
documentation supporting those projections. Case notes indicate the counselor's 
intention to inspect the business and goods purchased, but there was no evidence a 
visit was actually made. The consumer did not provide DVR with receipts for any 
of the purchases. Six months after issuing the checks, DVR sent the consumer a 
letter requesting employment status information. DVR received no response from 
the consumer and closed the case as unsuccessful. 

Other instances of misused funds involved lesser dollar amounts. For example, in 

one case, payments made for post-secondary education exceeded the policy 
guideline amount by $2,500 with no supporting justification in the case file. In 
another case, a consumer with an expressed need for transportation assistance 
received a direct payment of $2,558 to pay for transmission repair on his vehicle ~ 
after insisting the vendor would not take a BRS purchase order, or present a biU for 
payment to the State. After receiving this payment, and another advance of $399 to 
purchase work clothes, the consumer broke all contact with DVR without ever 
providing receipts for those items. 

We estimate the transactions included in our sample representing fraud or other 
misuse totaled over $100,000. BRS determined other cases in OPEGA's sample 
did not represent fraud or misuse, but agreed they shotild definitely have been 
reviewed for that potential and were not. BRS has yet to make a determination on 
another 2 cases that OPEGA questioned. 

See Actions D-F and I in the Management Actions section of this report for steps 
BRS and the Service Center plan to take to detect any other instances of misused 
funds. 
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Finding 3 - Inadequate Policies and Procedures to Support 
Stewardship of Resources 

"Written policies and procedures help ensure employees know what is expected of them and also 
provide for standardisation among district offices. The policies and procedures are particularly 
important when there are offices in manj locations and there is high staff turnover. Policies and 
procedures are an important internal control that establish responsibilities and accountability, and 
help ensure consistency among staff. " '"^ 

BRS lacks effective policies and procedures to help ensure all staff responsibly 
steward resources and provide consistent, equitable treatment of consumers. 
Existing policy manuals provide some guiding principles to help counselors make 
independent decisions and the New Counselor Training Manual has various sample 
forms for counselors to use related to procurement of goods and services. 
However, the policies are not well supported by procedures establishing how they 
should be implemented and the forms often lack clear written instructions for 
completing them. In addition, OPEGA noted practices that were not governed by 
any written policies or procedures, as well as non-compliance with some policies 
that do exist. 

For example, payments made directly to consumers as advances or reimbursements 
carry high inherent risk the consumer wiU not purchase what is intended or wiU not 
provide evidence of the purchase. BRS has no written policies or procedures 
describing when such payments are appropriate, establishing dollar limits or 
requiring documentation or supervisory review. During the time period under 
audit, DVR and DEVI combined made a total of over $4.2 million in direct 
payments to consumers or approximately $1.4 million per year. OPEGA reviewed 
24 cases with direct payments to consumers. Nineteen of them had large payments 
for goods and services such as tuition, rent, car repairs, tools and equipment where 
the payment could have been made directly to a vendor instead of the consumer. 
Many of the case files contained little or no documentation the items were actually 
purchased, or used as intended. Table 4 shows the breakdown of direct payments 
to consumers for SFY 2004 - 2006. 



Table 4. Direct Payments to Consumers SFY 04-06 


SFY 


DVR 


DBVI 


Total 


2004 


$1,468,420 


$16,142 


$1,484,562 


2005 


$1,205,546 


$30,738 


$1,236,284 


2006 


$1,505,939 


$21,049 


$1,526,988 


Total 


$4,179,905 


$67,929 


$4,247,834 



IS Office of Vocational and Educational Services for Individuals with Disabilities (VESID) 
Internal Controls Over the Procurement of Goods and Services for the Period 1/1/00- 
6/30/04, University of the State of New York, The State Education Department, Office of 
Audit Services, 2004 ( http://oms33.nvsed.gov/press/090704attachmt.htm ). 



Office of Program Evaluation & Government Accountability 



page 22 



Bureau of Rehabilitation Services: Procurements for Consumers 

We also noted other practices creating opportunities for misuse of funds currently 
unregulated by written policies or procedures. They include: 

• payments made in excess of authorized amounts; 

• cases where the only expenditures were direct payments to consumers for 
transportation and/or maintenance — ^with no explanation of why; 

• consumers receiving goods such as equipment for a business, computers or 
vehicles without signing a Maine VR Purchased Equipment Agreement"; 

• little documentary evidence of price comparisons or other efforts to assure 
economical purchasing of items such as computers, business equipment 
and used vehicles; 

• current BRS staff receiving services as consumers'^; and 

• current BRS staff receiving payments as vendors. 

Post-secondary education, on which BRS spends over $1 million per year, is an 
example of inconsistent compliance with existing poUcy and procedures. Federal 
regulations govern contributions to post-secondary education and training, and 
BRS has written guidance for how to determine the appropriate VR contribution. 
Under BRS policy, this contribution generally shotild not exceed what BRS would 
contribute for the consumer to attend the University of Maine or a Maine 
community college. BRS procedures also require counselors to complete a specific 
form to calculate the amount of that contribution. There are written instructions 
on how to complete the form, although they are somewhat unclear. 

OPEGA reviewed 1 3 files with post-secondary education expenditures and found 
procedures were not followed consistentiy or documented to the degree necessary 
to verify compliance with poHcy. OPEGA observed files with incomplete financial 
aid forms, forms for one year but not subsequent years, and forms apparentiy 
indicating a lesser amount of unmet need than paid by VR, with no documentation 
explaining the difference. Files also often lacked transcripts or other 
documentation of the consumer successfully completing the course work. Table 5 
shows the breakdown of payments for post-secondary education in SFY 2004 — 
2006. 



SFY 


DVR 


DBVI 


Total 


2004 


$1,354,991 


$62,717 


$1,417,708 


2005 


$1,327,633 


$42,567 


$1,370,200 


2006 


$1,305,198 


$56,048 


$1,361,246 


Total 


$3,987,822 


$161,332 


$4,149,154 



" BRS has a form for this agreement which requires consumers to return purchased items 
if they are no longer using them toward their employment goal. 

^8 Consumers of DVR or DBVI may become employed by BRS but remain eligible to receive 
some post-employment services as consumers. 

19BRS staff serving as vendors is generally prohibited. 
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Other examples of weak policies and procedures or non-compliance include: 

• IPEs did not always include a total plan cost estimate; 

• expenditures were sometimes charged as group purchases when they 
should have been charged to individual consumers to more accurately 
capture total VR costs for those consumers; 

• purchases for goods or services seemingly unrelated to vocational goals or 
employment plans were made with no documentation to justify them; 

• no documentation existed in files to show whether the DVR 
Transportation Procedural Directive was followed, i.e. blue book value not 
in file, no evidence of VRC consultation with certified mechanic, no 
evidence of 30 day repair warranty from licensed mechanic; and 

• CRP approved vendor list was not up to date and nothing prevents other 
vendors from being used. 

See Management Actions B, D, G and H for steps BRS plans to take to address 
this finding. 



Finding 4 - Inadequate Separation of Duties for Purchase 
Transactions 

'Key duties and responsibilities should be divided or separated among different individuals to 
reduce the risk of errors and misappropriations. No one individual should control all key aspects 
of a transaction or event and the work of one employee should serve as a check on others. Ideallj, 
for the purchasing process, the initiation, authori^^ation, approval, ordering, receipt, payment and 
record keeping should be performed by different employees. Where the duties can not be adequately 
separated, there should be increased supervisory review and oversight "^^ 

Procurement and payables functions at BRS are not effectively separated. As 
discussed in Finding 1, BRS addressed past concerns about this weakness by 
initiating a two signature requirement on the paper R20s used for authorizing 
orders and payment of invoices. This action, however, has not been sufficient to 
resolve the problem for two reasons. 

First, counselors continue to control all aspects of purchase transactions due to the 
nature of their relationship with support staff and each other. Typically, a 
counselor asks support staff or a peer to process and sign an order for a good or 
service (authorizing R20) which is then subsequently approved for payment by the 
counselor (invoicing R20). No approval by a supervisor, or other individual with 
authorit}r to deny the authorization or payment, is required. Manifests require no 

20 Office of Vocational and Educational Services for Individuals with Disabilities (VESID) 
Internal Controls Over the Procurement of Goods and Services for the Period 1/1/00- 
6/30/04, University of the State of New York, The State Education Departnnent, Office of 
Audit Services, 2004 ( http://oms33.nvsed.gov/press/090704attachmt.htm ). 

2iManifests are for repeated regular payments usually made directly to consumers for a 
limited period of time. 
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second signature and are controlled solely by the cotinselors who initiate them. 
Additionally: 

a. any employee, including a counselor, can get a new vendor established in 
ORSIS and then in MFASIS/AdvantageME by sending a form to the 
Controller's office without anyone verifying whether the vendor is vaUd; 

b. the counselor determines what vendors will be used or what vendors a 
consumer wiU choose from; and 

c. the counselor controls the evidence (documentation) of the consumer's 
receipt of goods or services. 

Second, ORSIS does not limit access to functions based on role. All employees 
with general access (support staff, counselor, supervisor, manager) are able to 
perform purchasing and payable functions within the system. Single employees are 
also able to perform mviltiple functions like create new vendors, authorize 
purchases, and approve payments — thus allowing them to complete an entire 
purchase transaction without any oversight. ORSIS does not require any approvals 
before transferring completed transactions to MFASIS/AdvantageME for payment 
and there is no review of individual transactions prior to or after the transfer. 
Consequentiy, two signattires on the paper documents are meaningless. 

The vulnerability presented by the ineffective separation of duties at BRS is 

exacerbated by a lack of poUcies and procedures (Finding 3), and is not 
compensated for by supervisory review of specific case expenditures (Finding 5). 

See Management Actions A, C and D for BRS' plans to effect proper separation of 
duties. 



Finding 5 - insufficient Verification of Expenditures 

"Verification is determining on a periodic basis the completeness, accuracy, authenticity, and 
validity of transactions, events, or information. It is management's responsibility to ensure activities 
are being conducted in accordance mth directives. Management should identify key areas and 
implement procedures to periodically ensure the transactions or events are processed in accordance 
with expectations. " 

BRS has insufficient controls for periodically verifying whether purchase 
transactions are appropriate, accurate and in compliance with policies and 
procedures. OPEGA noted the following: 

• BRS' New Counselor Training Manual includes a Case Review Form for 
supervisors to use and implies that case reviews should be completed at 
four different phases of a case. In reality, case files are not regularly 
reviewed and, in fact, may never be reviewed by supervisors. Nearly 76% 
of the 53 cases that OPEGA tested for evidence of formal case review 
showed no evidence of any supervisory review at all. Some cases are 



^^Ibid. 
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reviewed informally when counselors request supervisory guidance, but 
these reviews are not formally recorded on the Case Review Form and do 
not include proper fiscal review of all expenditures. 

• The multi-page Case Review Form does include a fiscal review section 
asking about consideration of comparable services, necessity of services 
provided, consistency with agency poUcy, and cost-effective provision of 
services. However, questions specifically addressing financial 
documentation such as receipts, invoices and calculation of expenditures 
Uke post-secondary education, are not part of the Case Review Form. It 
also appears the form is not used. Supervisors OPEGA spoke with had 
never used or were unfamiliar with this form and we saw no Case Review 
Forms in the files reviewed. 

• In July 2004, BRS issued a procedural directive reqtiiring supervisors to 
review high cost or long term cases. High cost cases were defined as those 
with new IPEs or amendments exceeding $6,000 or cumulative expenses of 
$12,000 or more. Long term cases were those open more than 5 years. 
Under the directive, this case review was supposed to be documented in the 
individual case record. OPEGA found this directive was not being 
complied with. Twenty-five of the cases reviewed by OPEGA met the 
criteria for supervisory review but 64% of them showed no evidence of 
review in the individual case file or any other file. The remainder had 
evidence of informal review that did not appear to include verification of 
individual expenditures for the case. OPEGA also spoke with one 
supervisor who said she was completely unfamiUar with a case that had a 
total cost exceeding $85,000. She stated the case had not been reviewed 
partly because it was assigned to a new cotinselor who had only worked at 
BRS for 18 months. 

• Available ORSIS reports and specific analyses of ORSIS data are not being 
used to identify questionable expenditures. Nor are they being used to 
monitor expenditure trends that may indicate a need for new or enhanced 
controls to ensure the economical use of resources. 

• The Service Center relies on BRS to maintain effective controls over 
procurement transactions. The Service Center does not perform any 
verification of its own on transactions that are transferred from BRSIS to 
MFASIS/AdvantageME for actual payment. This means the Service 
Center is not checking whether transactions have been properly approved, 
whether payment amounts agree to invoices, etc. There also are no daily 
batch controls to assure that all transaction data is accurately transferred 
from one system to the other and no periodic reconciliations of payment 
data in ORSIS and MFASIS/AdvantageME to assure the data in both 
systems agree. OPEGA attempted to perform a reconciliation and found 
payments in MFASIS which had been deleted in ORSIS. While the 
explanation for these particular discrepancies appears reasonable, 
discrepancies between the two systems could affect the accuracy of federal 
and management reporting and be indicators of inappropriate activity. 
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See Management Actions C-G for how BRS plans to achieve adequate verification 
of expenditures. 



"All transactions, purchased goods and services, and significant events should be clearly 
documented in each consumer's case fitle. The documentation should be complete, accurate. 



OPEGA found documentation in case files to be incomplete, inconsistent and 
inadequate to support expenditures made, to demonstrate compliance with policies 
and procedures, or to allow assessment of efforts to purchase economically. Some 
case files could not be located or had been shredded based on the case clostire date 
even though there were post closure expendittires. 

Specifically, OPEGA observed case files with: 

• insufficient evidence consumer had received goods and services - lack of 
invoices, receipts, signed statements, school transcripts, etc.; 

• misfiled R20s that belonged to cases for other consumers; 

• payments for amovints greater than amount requested by consumer, or on 
the receipt, with no justifying explanation; 

• payments initiated more than 90 days after the purchase was authorized 
even though R20 authorization forms are void after 90 days; 

• inconsistent/inaccurate coding of expenditures — e.g. purchases coded as 
miscellaneous when more specific codes for transportation or education 

should have been used; 

• inadequate documentation explaining purchases and their relationship to 
IPEs or vocational goals; and 

• inconsistent and/ or inadequate documentation of calculations for 
contributions to post-secondary education. 

In several cases, there were no receipts for significant purchases like business 
equipment and home modifications. Nor were there any case notes indicating the 
cotinselor had visited the consumer to verify eqtiipment purchases or home 
modifications had actually been made. Official documentation such as school 
transcripts, certifications or other proof a consumer had successfully completed a 
semester of school or training program was also lacking in several files. 

OPEGA generally found required documentation to be missing from case files for 
consumers with self-employment goals. For example, a June 2004 DVR procedural 
directive on self-employment requires the VRC to verify income generated by the 
constimer's business in order to close a self-employment case as successful. 
Income must be eqtiivalent to minimum wage or higher. Files reviewed by 



Finding 6 - Poor Documentation to Support Expenditures 




23 



Ibid. 
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OPEGA included some information on businesses opening like statements from 
owners, newspaper articles and advertisements. However, documentation of 
income from these businesses, such as profit and loss statements or tax returns, 
were not observed in any files successfully closed with self-employment goals. 

BRS expects that doctimentation weaknesses will be resolved with implementation 
of Management Actions A, B, D, G and H. 

Finding 7 - Computer Controls Laci<ing 

"Computerised information systems are an integral part of most organisations' operations. The 
systems are used to facilitate processing transactions as well as to monitor and report results. 
Controls must be in place to limit access to authorised users; ensure data on the system are 
complete, accurate and timely; maintain an audit trail for each transaction; verify the validity of 
data; and generate reports that effectively monitor performance. " ^"^ 

ORSIS is functioning as a purchasing and accotints payable system, but has not 

been recognized as such. Consequendy, BRS has not incorporated into ORSIS the 
internal controls typically found in such systems to ensure assets, including funds 
and data, are properly safeguarded. 

For example, ORSIS edit checks are inadequate to ensure the validity of financial 
data and transactions. OPEGA found the system allows payment back dating, 
payments on closed cases or for consumers in ineligible statuses, and payments in 
excess of authorizations - all without edits to alert users or to require special 
approvals in order to process the authorization or payment. In SFY 2004 - 2006, 
there were 199 payments made on closed cases and 4,577 payments exceeding the 
associated authorization amounts by a total of $549,707. Most users can also 
change authorized purchase amounts in ORSIS after R20s have been sent to 
vendors. 

Also, as noted in Finding 4, permissions to functions and data in ORSIS are not 
based on the roles of particular users. System access is not sufficientiy controlled 
to prevent unauthorized transactions or protect the validit\r, reliabilit}^ and 
completeness of ORSIS data. ORSIS does not permit "read-only" access to the 
system. All ORSIS users, including staff with no caseloads, have a general level of 
system access allowing them to create consumer records, change consumer records 
on open cases, and create and change authorizations and payments. 

Other system control concerns OPEGA noted include: 

• any employee can approve payments in excess of the amount originally 
authorized; 

• a few users are able to delete payment and/ or authorization records in 
ORSIS even after payments have officially been processed and checks 
mailed; 
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• some users can back date consumer statuses; and 

• the ORSIS programmer has full access to the production environment and 
is able to access and change live data. 

OPEGA also noted concerns with regard to management of the system in general. 
For example, OPEGA observed that monitoring changes to data and the overall 
reliability of the database has not been a priority despite the lack of controls as just 
described. In addition, there is no formal process for regularly reviewing the 
appropriateness and necessity of system permissions for specific users or to remove 
system access when someone leaves BRS employment. OPEGA reviewed 
individuals with last names beginning with A or B on the list of users and identified 
four individuals with ORSIS access who are no longer employed by BRS. Lasdy, 
the process for making changes to the ORSIS system is mostiy informal and 
changes made are not well doctimented. Nor do system changes require 
documented approval by an appropriate stakeholder before they are implemented. 
Overall, the process also does not appear to include consideration of the impact of 
requested changes on the system as a whole, or on other change priorities. 

See Management Action C for BRS' planned improvements to computer controls. 

Observation 1 - Consumer Contributions Could Increase Available 
VR Resources 

BRS may be able to increase resources available for all consumers, and improve 
consumer "buy-in" to the success of their plans, by consistentiy requesting that 
consumers contribute financially, if able, toward their own plans. Under the 
Rehabilitation Act, an individual's eligibility for the program must be determined 
solely by the individual's disability with no regard to the individual's financial status. 
VR agencies are allowed, however, to gather income information and may ask 
consumers to contribute financially toward the cost of their individual employment 
plans. Consumers cannot be denied goods or services necessary to the plan if they 
do not wish to contribute, but any contributions they do make result in more 
resources being available to serve other consumers. 

Currentiy, DVR and DBVI counselors have discretion in whether or not to request 
a contribution and there is no standard procedure a counselor can use to assess a 
consumer's ability to contribute. Consequentiy, OPEGA observed inconsistent 
gathering of income information and found littie documentation of requests made 
of constimers, consumer responses or actual contributions made, even in cases 
where it appeared the consumer or consumer's family likely had the financial 
capacity to do so. 

BRS previously considered revising its policy to require counselors to assess 
consumers' abiUt^r to contribute and request contributions, if appropriate, for every 
case. Treating consumers equitably in this regard, however, would require 
counselors to collect accurate and complete income information, including 
household income, and assess contribution potential for every consumer. BRS 
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iiltimately felt this wotild not be a good use of resotirces as it believes most of its 
constimers have very limited incomes and wotild likely not be in a position to make 
any contribution. 

BRS continues, however, to have insufficient financial resources to serve all eligible 
consumers. Given this, OPEGA encourages BRS to consider gathering the data 
necessar}? to better evaluate the potential financial benefits of seeking consumer 
contributions on a more routine basis and then reconsidering its policy as 
appropriate. 

Observation 2 - Centralization of ORSIS Servers Could Increase 
Efficiency and Reduce Data Problems 

opportunity exists to increase efficiencies at BRS and reduce data errors, 
inconsistencies and lost transactions within ORSIS by fully centralizing the 
computer network on which ORSIS is deployed. Currentiy, the network is 
decentralized with a central server at the hub and local servers associated with each 
BRS office. For the most part, the central database only receives information from 
the local servers, but does not communicate out to them. The local servers also 
cannot communicate with each other. Consequentiy, each office effectively 
maintains its own ORSIS database and there is a process for merging information 
from each local server into the central server. Each server, central and local, also 
has its own security protection. Consequentiy, users requiring access to data 
residing on more than one server, i.e. District Managers and central office staff, 
must maintain multiple user ID's and passwords and log in separately to each 
server. 

OPEGA observed that maintaining security and accurate, consistent and complete 
data in this network environment appears to consume considerable human 
resources. The current configuration also creates inefficiencies in serving 
consumers as information cannot be readily shared among local offices through 
ORSIS. BRS had planned to move to a new network configuration under the new 
OIT Enterprise for the Department of Labor but the implementation of the 
Enterprise system has been repeatedly delayed. OPEGA encourages BRS to 
continue to pursue fuU centralization of ORSIS with OIT, perhaps collecting data 
on the financial and service consequences of the current configuration to help 
justify it as a priority. 
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Management Actions 

BRS has taken a holistic approach to addressing the significant weaknesses 
identified in this audit. Upon receiving OPEGA's recommendations, BRS and the 
Service Center devoted significant attention and resources to designing a complete 
system of internal controls that would adequately protect State resources while 
maintaining the integrity of BRS' mission and supporting its service improvement 
goals. Since BRS currentiy does not have enough resources to serve all eligible 
consumers in a timely manner, any dollars gained through improved fiscal 
management wiU allow more consumers to be successfully served. 

BRS and the Service Center sought to strike a reasonable balance between fiscal 
controls and programmatic needs and worked closely with OPEGA to assure that 
the proposed controls would address the concerns identified. Taken together, the 
management actions described below will result in a system of controls that 
addresses OPEGA's findings in an integrated way and should create a culture that 
promotes both fiscal responsibility and improved service delivery. 

The Service Improvement Quality Assurance unit (SIQA) within BRS will oversee 
a work plan for implementing the actions agreed upon. Leadership of the Bureau 
and Department is fully committed to providing the necessary resources to assure 
execution of the action plan described below. 

Action A - Revised Procurement Processes 

By July 2008, BRS wiU implement new procurement processes that, taken together 
with new case review protocols, will effectively separate duties. The specifics are as 
follows: 

• Counselors will continue to authorize all purchases with the exception of 
those to be paid via manifest. Manifest authorizations wiU require 
super\nsor\' approval and will have limits on the period of time the manifest 
can be established for. 

• Supervisory review or consultation may be required by poHcy for specific 
types of transactions or situations (see Action B). In these cases, 
covinselors will seek supervisory review or constiltation prior to authorizing 
a purchase and evidence of the review will be maintained in the case file. 

• Counselors will verify that the goods and services to be paid for were 
received by the client and were satisfactory. Counselors will also obtain 
appropriate evidence of that receipt. 

• Support staff wiU initiate payment of invoices after verifying that the 
authorization, invoice and receipt documentation agree as to quantity, type 
and cost of the goods or services. Support staff wiU be required to obtain 
supervisory approval before initiating payments that exceed the authorized 
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amoiint or where there is any other discrepancy in the three pieces of 
documentation supporting the transaction. 

• The documentation supporting the payment transaction, including evidence 
of receipt, will be maintained in the case file. 

• ORSIS permissions will be carefully structured based on staff roles to limit 

authorit}' and access to transactions consistent with these protocols. 
ORSIS controls will require an authorization to be entered in ORSIS before 
a payment can be initiated and will not allow both the authorization and 
payment in ORSIS to be entered by the same person. 

Supervisory and other independent review of the appropriateness of individual 
transactions, overall expenditures on cases and compliance with procurement 
policies and processes will be accomplished through the revised case review 
protocols (see Actions D-F). 

Action B - Strengthened Policies and Procedures 

To further reinforce the ethical competencies and services expectations of its 
professional work force, BRS will update its programmatic policies and procedtires 
or develop new ones as required to address the OPEGA findings. New/ revised 
policies and procedures will be incorporated into a procedure manual and program 
rules and will include the following as appropriate: 

• guidelines and examples of situations where the policy should be applied or 
where exceptions may be allowed; 

• dollar amount guidelines; 

• requirements for supervisory review/ consultation of deviations from 
policy/ procedure; 

• documentation requirements; and 

• specific procedures to support effective implementation of the policy. 

In addition, intranet resources such as forms necessary to facilitate and measure 
compliance with policies and procedures are currently being developed. 

BRS expects to have new or updated policies and procedures addressing the 
following areas developed by September 2008: 

• direct payments to consumers for reimbursements, advances, or other 
reasons; 

• invoices exceeding authorized amounts; 

• use of CRP approved vendor listing; 

• actions taken to consider least cost methods consistent with the client IPE; 

• retaining a State interest in goods purchased to implement an individual 
client IPE; 
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• cost estimates on IPEs; 

• documentation of expenditure's relationship to vocational goal; 

• employee conflicts of interest, including situations where BRS employees 
are VR consumers; 

• calculation of VR contribution and consumer contributions for post- 
secondary education; 

• transportation assistance to support core VR services; 

• use of grouped purchases; 

• self-employment as a vocational goal; 

• comprehensive assessment of rehabilitation needs; and 

• payments on authorizations older than 120 days. 

BRS wiU also establish administrative poUcies and procedures related to the 
following and include them in the policy and procedure manual: 

• revised procurement process; 

• expected fiscal documentation to be maintained in case files; 

• detailed instructions on coding of expenditures; 

• case file sign-out system; and 

• case record retention requirements. 



Action C - Strengthened Computer Controls 

According to BRS, ORSIS has been a very problematic application since its 
development in late 1995. The Bureau has operated with this system despite its 

serious deficiencies. As a result, the Bureau has incurred continuing development 
costs over the entire life of the system. BRS states that these costs are currentiy 
running around $200,000 a year. 

BRS intends to further develop and implement the computer controls in ORSIS 
that are necessary to help ensure compliance with established policies and 
procedures as well as further safeguard the accuracy and completeness of data. 
BRS reports it has been allocating significant staff time (12-15 hours/week) toward 
this effort through weekly Daily Operations Group (DOG) meetings, but that 
progress is extremely slow. BRS has significant concerns about ORSIS capability, 
and has set a completion date of Spring 2008, with a contingency plan that if this 
date is not met, all options for a successor application to ORSIS wiU be evaluated. 

BRS is currentiy working toward completing the following specific actions to 
address OPEGA's findings with regard to ORSIS controls: 

• Update ORSIS' permissions structure to separate duties and establish new 
procedures and niles for approval of payments (see Finding 4). 
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• Incorporate automated controls and edit checks into ORSIS to safeguard 
funds and data such as: 

— change "paid date" field to be system generated (completed July 2007); 

— allow payments on closed cases only with supervisory approval; 

— allow payments in excess of authorized amount only with supervisory 
approval and proper separation of duties; 

— assure authorization records cannot be deleted after payment has been 

initiated or made; 

— Umit backdating of payments in ORSIS to only the few users authorized 
to perform this function (completed July 2007); 

— prevent changes to authorizations after any supervisory approval required 
by policy; 

— allow payments on authorizations over 120 days old only with supervisory 
approval and proper separation of duties; and 

— remove ORSIS programmer's access to live production system and limit 
ability to manage database to BRS Database Manager(s). (This is 
dependent upon completion of an existing OIT initiative to implement an 
infrastructure that better separates the development, testing, and 
production environments, as well as the roles/responsibilities of those 
who are responsible for those environments). 

• Continue work already begun to explore the feasibility^ of designing and 
adding functionality to ORSIS that will automate some manual controls such 
as: 

— electronic approvals using fields for required staff employee IDs so a 
transaction does not proceed until electronic approval by authorized 
individual is entered; and 

— 3-way match using ORSIS to validate match between authorizing R20, 
invoice information entered and receipt information entered, with any 
differences requiring resolution by a supervisor. 

• Incorporate ongoing monitoring and analysis of ORSIS permissions into the 
Daily Operations Group meetings to ensure those permissions are 
appropriate and ctirrent, and data is protected, valid and reliable. 

• Improve documentation relating to system changes including documentation 
of: 

— change requests, subsequent actions and tests; 

— impact assessments of requested changes on ORSIS and on other change 

priorities; and 

— change approval by appropriate stakeholder(s). 

• Develop procedures for how to monitor supervisory permission overrides 
and review ORSIS data to ensure those procedtires are followed and properly 
documented. 
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• Modify ORSIS to add "read-only" access for particular users with no 
caseload responsibilities. 

• Establish a process for reconciling ORSIS and AdvantageME on a monthly 
basis. 

In response to OPEGA's observations, BRS wiU continue to seek implementation 
of a fuUy centralized database to resolve the issue of data inconsistencies between 
local and central servers. This action is dependent upon implementation of DOL's 
Enterprise system. 

Action D - Redesigned and Strengttiened Case Review System 

BRS wiU implement a redesigned and strengthened case review system by January 
2008. The system provides comprehensive case review encompassing both 
programmatic and fiscal components. Anticipated benefits include increased 
resource availability and successful consumer outcomes, as well as increased focus 
and review of cases involving multiple and/ or fiscally significant risk factors. The 
Bureau also intends for this redesigned system to transform the role of supervisors 
from reactive, resolving problems when cases are brought forward by counselors, 
to proactive, performing standard comprehensive review of a percentage of 
counselor case loads on a quarterly basis. 

Under this redesigned system, supervisors will review: 

• all cases assigned to VRCs during their first 6 months of employment at 
specific points in the VR process - eligibility determination, comprehensive 
assessment of rehabilitation needs, IPE development and closure; 

• individual high cost and long-term cases; and 

• all post-secondary and self-employment cases where expenditures are 
estimated to be greater than BRS policy. 

Additionally, ten percent of all cases active for at least 6 months wiU be reviewed 
annually through quarterly supervisor sessions and ten percent of all closed and 
post-employment cases will be reviewed annually through quarterly SIQA-led 
sessions. 

Development of supervisory skills necessary for effective case review is currendy 
underway. In addition, the case reviews wiU be performed and documented using a 
revised case review form that prompts coverage of both programmatic and fiscal 
aspects of the well as the adequacy of documentation to meet both 

programmatic and fiscal requirements. Case review documentation will be 
maintained centrally with a notation made in the individual case record. 
Information gathered will be shared with cotinselors, supervisors, managers and 
training coordinators for performance and system improvement. 
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Action E - Monitoring for Risl< Indicators 

Effective March 2008, the SIQA unit will begin monitoring ORSIS data on a semi- 
annual basis to identify transactions or cases that may be at higher risk for fraud, 
misuse of funds or non-compliance with BRS policies. SIQA will use existing 
ORSIS reports and create new ORSIS reports, based on the data-mining logic 
OPEGA used in this review, to screen for indicators of these risks. The SIQA unit 
will refer flagged cases to division operations leadership for review and assessment 
of overall service quality and compliance. The SIQA unit and division operations 
leadership will also assess multi-year restilts of this monitoring at standard intervals 
to identify case management and internal control issues that may need attention. 

Action F- Service Center Auditing 

The financial management representative assigned to BRS within the DAFS 
Security and Employment Service Center wiU begin conducting a semi-annual 
review of BRS procurement transactions by January 2008. The Service Center will 
select a random sample of individual case files at 6 BRS field offices and review the 
related transactions for: 

• fiscal soundness; 

• supporting documentation of expenditures; 

• internal control/ segregation of duties; 

• economical purchasing; 

• expenditure reasonableness and relationship to IPE; and 

• accurate coding of expenditures. 

The Service Center will compile its findings and forward them, with 
recommendations for resolution, to BRS management. BRS management will 
address and resolve the concerns identified and provide a report to the MDOL 
Commissioner. 



Action G - Training for Supervisors, Managers and Staff 

BRS will develop training programs for all managers, supervisors and staff on new 
or revised policies and procedures and the Bureau's redesigned case management 
and procurement review processes. Supervisors wiU also receive strengthened 
training in performance coaching, instruction and consultation in case review. The 
training is expected to: 

• clearly communicate tasks, expectations, responsibilities, effective 
separation of duties and all procurement requirements; 
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• communicate the rationale and necessity for the revisions to policy, 
procedure and process and the revised internal controls incorporated 
therein; and 

• reinforce a culture of oversight, internal controls and fiduciar}^ 
accountability that supports providing individual case services in the most 
cost efficient and economical manner available. 

Training for all managers, supervisors and staff will be provided by December 
2008. 



Action H - Enhanced Accountability for Staff Compliance 

Effective July 2008, compliance with all fiscal and programmatic requirements will 
be incorporated into counselor and supervisor performance evaluations. 

Action I - Expanded Awareness and Identification of Existing 
Fraud or M/suse of Funds 

BRS has already completed its own review of all 68 cases included in OPEGA's 

sample for this audit. BRS reviewed these cases with its revised case review tools 
and protocols to assure they wiU help identify cases with potential fiscal risk in the 
future. 

As reported in Finding 2, BRS' review of the 68 cases did confirm cases of 
apparent fraud involving three employees as well as other cases with misused 
funds. The Bureau is taking appropriate action on these cases. As a result of the 
review, BRS also expanded its inquiry to include several complete caseloads. BRS 
will report to OPEGA on the results, and actions taken, when that review is 
complete. 

In addition, BRS intends to review other cases identified by OPEGA as being at 
risk for fraud or misuse, but not included in OPEGA's sample. BRS expects to 
complete this review by February 2008. At that time, BRS will report to OPEGA 
on the results of the review, including the dollar amount of any actual misuse or 
fraud identified, and any actions taken by BRS. 

Lastiy, BRS will implement a robust procedure for addressing reported fraud or 
misuse of funds which includes an assessment of the related risk and protocol for 
making procedural changes to prevent reoccurrence. 
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Agency Response 

In accordance with 3 MRSA §996, OPEGA provided the Department of Labor's 
Bureau of Rehabilitation Services and the Department of Administrative and 
Financial Services' Security and Employment Service Center with an opportunity to 
submit comments on the draft of this report. The response letter can be found at 
the end of this report. 
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MAINE DEPARTMENT OF LABOR 
BUREAU OF REHABEJTATION SERVICES 



AGENCY RESPONSE TO OPEGA REPORT 

"BRS Procurements for Customers - Weak Controls Allow Misuse of Funds, 
Affecting Resources Available to Serve all Customers" 



The Bureau of Rehabilitation Services (BRS) offers the following response to the recent performance audit of its 
processes for handling "Procurements for Consumers". 



Core Mission and Culture 

The Vocational Rehabilitation programs administered by BRS are authorized and governed under Title 1 of the 
Federal Rehabilitation Act, the preamble of which expresses its purpose - - "To Empower Individuals with 
Disabilities to Maximize Employment, Economic Self Sufficiency, Independence, and Inclusion and Integration 
into Society." 

The Rehabilitation Services Administration (RSA) within the US Department of Education is charged with 
overall review and monitoring of state program compliance with the Federal Rehabilitation Act. The RSA 
conducts aimual reviews and on-site monitoring to test state program compliance with the provisions of its state 
plan and with the Evaluation Standards and Performance Indicators established under Section 106 of the Act. 

At the heart of this effort is the investment of pubHc money in the potential employabiUty of a person with a 
significant disabihty. The fundamental assumption is that there is a public benefit in empowering individuals to 
be active in the workforce, understanding that the alternative is continued investment in systems that offer a 
lifetime of public maintenance programs. 



The Challeng e 

The employment rate of working-aged people with disabilities is approximately 38 percent, less than half the 
rate of their non-disabled peers. National data confirm a return on investment of over six times the cost of 
individual Vocational Rehabilitation (VR) services. Given the current economic, workforce enviroimient and 
related forecasts, it is clearly very important that BRS be successful in its work. 

Our system challenge is to carry out this mission with a careful balance of purpose, stewardship of pubUc 
resources, and empowerment of clients to accomplish employment/career hopes and dreams; in short 
professional vocational rehabilitation counseling. 

Case by case, the accomplishment of a successful outcome for VR customers is the result of a process that must 
correctly identify individual aspirations, skills and abilities. And, the counselor must partner with each 
consumer to develop an employment goal and create a plan to overcome specific barriers to employment that 
arise from a primary disabihty or unique combination of disabilities. In this context, our system emphasis has 
been on direct and personalized customer services. 
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Over time, program eligibility has been expanded, and program service priorities have been directed to serve 
those with the most significant disabilities. Our response to resource reduction has been to absorb cuts as far 
away from direct client services as possible. 

Over the years, federal policy changes have expanded the categories of people eligible for program services, the 
types of quahfied employment outcomes, and the variety of services that can be provided. Expanded service 
eligibiUty, greater case complexity, and the resultant strain on resources have required continuous changes in 
organizational structure, expanding caseload responsibilities per counselor and front line supervisors and 
continuing reallocation of program resources away from organizational management and systems leadership. 

These choices have had a cumulative effect. 

In recent years, BRS has absorbed the departure of supervisors and managers, as well as seasoned counselors to 
better paying opportunities in the private sector and to retirement. Agency- wide, our turnover rate has been a 
steady 15%. The Bureau has been permitted to fill vacant counselors positions pursuant to a blanket waiver 
from the freeze on state hiring. However, in the more competitive Greater Portland, Lewiston and Augusta 
labor markets where we must compete with the private sector to attract staff with the required professional 
credentials, the counselor turnover rate has been significantly higher. 

Recognizing these workforce challenges, BRS has taken some action to address capacity in the mid- 
management level, but we must figure out how to do more. 

For example, within DVR, we are restructuring from three to two Regional Managers and increasing 
supervisory lines. These actions will relieve short term pressure, but BRS is challenged to devise long term 
solutions to address the attraction of private sector employment for master level counselors with a concentration 
in vocational rehabihtation counseling. 



04-06 Program Performance and Management Activities 

Central to the OPEGA review of BRS procurement practices and processes is its review of transactions 
processed by the Bureau over state fiscal years '04, '05 and '06; e.g. July 1, 2003 through June 30, 2006. 

During this three-year period, more than 30,000 people were served by BRS programs, and in excess of 180,000 
transactions were completed on behalf of active clients with individual plans for employment. Coincidentally, 
the average time in plan for BRS chents is approximately 36 months. In the 3 year period selected by OPEGA 
for review, 2,661 clients were successfully closed in competitive employment as a result of VR services. 

The Bureau routinely reports data to track compliance with federal program performance standards and 
indicators to the Rehabilitation Services Administration within the USDOE. Program data reported to the RSA 
during the OPEGA examination period reflect the following information regarding the impact of Maine's VR 
programs. 

Wage Impact of VR Program: During SPY 04, 05, and '06, 2,042 consumers achieved a successful outcome for 
job placement after receiving services through BRS VR programs. The average weekly wage increase for these 
individuals was more than 300 percent. 

Public Assistance Impact of VR Program: During this same three-year period, approximately 50 percent of 
those consumers who received public assistance at the beginning of their programs no longer required public 
assistance support upon completion. This resulted in a decrease in the need for public assistance dollars totaling 
$2,845,032. 



2 



Following an assessment process begun in the winter of 2004, the Bureau recognized that overall client service 
and employment outcomes suffered from a cumulative reduction in attention to supervision and management of 
case review protocols. Around the same time, however, the new Bureau Director was made aware of a program 
budget problem whose impact ranged from 1 to over 3.1 million dollars. Addressing this fiscal crisis and 
managing the program impact in consultation with state, regional and federal program stakeholders diverted 
much of our attention from other pressing program priorities for the ensuing 12 months. 

Despite this distraction, the Bureau's Lead Team developed and implemented an operational plan for improving 
overall systems quality and reorganized its central office operations to place more emphasis on transparent 
financial analysis, organizational development and service improvement. 

Supplemental Materials 

Appendix One: Client Service Improvement Map {designed in '04; and last revised July '07). 

An example of the tools used by the Bureau Lead Team to prioritize, manage and update its systems 
improvement work over time. 

Appendix Two; BRS SFY 04 -06 Management Intervention Highlights. 

A narrative timeline of systems change activities during the review period reflecting the work undertaken to 
prioritize and address competing program management challenges. 
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The OPEGA review and The Plan Going Forward 



From the outset, BRS management has viewed the OPEGA evaluation process as an exceptional opportunity to 
focus and improve our operations, continue initiatives around transparent financial management, effectively use 
available resources, streamline procedures, emphasize results, and improve customer satisfaction. We are 
confident that the recommendations contained in this report, combined with existing program improvement 
work plans, will absolutely assist the Bureau in achieving these program goals. 

BRS explicitly acknowledges and affirms its commitment and responsibility to assure that every program dollar 
is managed as a pubhc investment in enabling people with disabilities to become employed and self-sufficient. 
To this end, the management actions presented herein will be incorporated into systems intervention strategies to 
improve VR program services. 

Specifically, BRS accepts the OPEGA findings and offers management actions intended to address the program 
deficiencies highlighted therein. These management actions focus on service improvement for individual 
customers and overall systems quality assurance. We seek to incorporate these management actions into the 
work underway to re-engineer every aspect of VR case management and improve the experience of job seekers 
with disabilities as they move through the VR process. 

Going forward, BRS will execute the management action commitments and implement robust internal controls 
as outhned in the OPEGA report by: 

. . . implementing new program pohcies and procedures; 

. . . implementing redesigned case review protocols and case management performance standards; and 
monitoring compliance via individual performance review and analysis of case data available through ORSIS; 
. . . implementing rigorous procurement standards and monitoring compliance in partnership with the Security 
and Employment Service Center (SESC) by conducting a semi-annual audit of chent service procurements. 



CONCLUSION 

BRS management sincerely thanks the OPEGA staff and our SESC partners for their assistance in getting 
through this review process and converting the findings into action to mitigate risks inherent in the VR 
procurement process. In closing, we have provided the following summary documents "Making VR Work for 
ME" and "Connecting tlie Dots". 

The first is a one page operational plan for implementing the systems changes discussed herein. This plan 
incorporates the check-list of management action commitments into the Bureau's organic plan for achieving 
sustainable systems improvements; and 

The latter presents the agency plan in a matrix format and offers a timeline for completion of the management 
actions. 

The agency will use these tools and others to monitor progress in achieving the systems change commitments 
contained herein. 
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Making VR Work For ME; An Operational Plan to Improve VR Services 



BRS will implement transparent internal controls and monitor their effectiveness. 

1. Case Management Systems: Implement redesigned case review (see Appendix Three: Flowchart of Case 
Review Re-design); and reinforce case management performance standards to improve outcomes/results for 
customers. 

. . . Continue focus on service improvement and quality assurance; meeting federal standards and indicators with 
priority on improving the rehabihtation rate for successful closures; and managing the wait for case services; 
. . . Management action priorities will include: clarification and adoption of new Standard Operating Procedures, 
case documentation and case management protocols; system- wide staff training; sharpened system-wide 
performance expectations; and improved supervisory training re: monitoring and coaching performance. 

2. Fiscal Management Systems: Implement risk management protocols, improve control and monitoring of 
procurements, and audit effectiveness of procurement controls and financial systems changes. 

. . . Management action priorities will include: implementing rigorous procurement standards coupled with an 
internal audit process to establish baseline data, test penetration of the new standards, and provide data to 
agency management to support continous improvement of systems procurement practices going forward. SESC 
staff assigned to provide financial management services to the agency will conduct the internal audit of client 
services procurement transactions (see Appendix Four: Pre- Audit of Procurements). 

. . . Initially, the audit will be done in six-month intervals. The results from the first audit will form a baseline 
against which penetration and effectiveness of process improvements can be measured. At the end of 18 
months, with three data sets and expertise with using the information, the agency will review the usefulness of 
the data produced and may adjust the frequency, refocus the audit parameters or adopt a revised method(s) of 
measuring the effectiveness of procurement protocols and managing risks in the procurement process. 

3. Quality Assurance System: Assess effectiveness of case review and management system changes; measure 
improvements in targeted services areas; identify and manage emergent risks and challenges; plan, do, check, 
act (PDCA) to assure continuous improvement. 

. . .Management action priorities will include: strengthened controls to facihtate computer reliant elements of the 

client services delivery system and automated elements of financial transaction processing; adopting the 
OPEGA data mining' protocol to flag case anomalies in targeted areas of risk, standardizing the internal process 
for investigation and analysis of data mining results, and initiation of corrective actions and continuous 
improvement strategies. 

. . . Initially, using the results from the original OPEGA data queries as a baseline, we will rerun the query 
against ORSIS systems data at 12 months and 18 months to again mine for case anomalies and investigate the 
flags raised. At the end of these two nms, we will reassess the data produced by the query and determine if and 
how to adjust the frequency, refocus the query or adopt a revised method(s) of measuring case services quaHty 
and managing risks in the case services system. 



Data Mining: OPEGA reviewed BRS procurement practices and processes and constructed a complex data query designed to perform 
a computer automated sweep of ORSIS data and flag variances from protocol and processing irregularities. The cases flagged as a result 
of this "data mining" were reviewed along with others to assess what has actually taken place in the case and to determine if and to what 
extent fraud, misuse or waste of funds had occurred. 
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Connecting the Dots : Our purpose in constructing the following matrix and timeline is to demonstrate at a 
glance that all of the elements of the OPEGA review and the management actions developed in response thereto, 
are captured in the foregoing " Making VR Work for ME" plan for achieving and sustaining comprehensive 
improvement in the quality of services provided by BRS. 



Service Improvement / Management Action Matrix 





Case IVIanagement: 

Implement redesigned case 
review; case management 
performance standards; 
improve customers 
outcomes. 


Fiscal IVIanageinent: Implement 
risk management protocols; 
improve control and monitoring 
of procurements , and audit 
effectiveness of internal controls. 


Quality Assurance: 

Implement data 
analysis; audit 
effectiveness of 
service delivery 
stanaarus, rUv_A. 










Action A - Implement Revised 
Procurement Process 


X 














Action B - Strengthened Written Policies 
and Procedures 


X 














Action C - Establish Controls in ORSIS 






X 










Action D - Redesigned Case Review 
System 


X 














Action E - Monitor ORSIS Data for Risk 
Indicators 






X 










Action F - Audit Procurement 
Transactions 




X 












Action G - Conduct Systcmwidc Training 


X 














Action H - Incorporate Compliance Into 
Staff Performance Review 


X 














Action I - Complete Review of Other 
Cases Identified by OPEGA 






X 
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Service Improvement/Management Action Timeline 



Management Action 


Completion 
Target 






MA-F: Implement Pre- Audit of Procurement Transactions 


Jan. '08 


MA-I: Complete Review of Other Cases Identified by OPEGA 


Feb. '08 


MA-E: Monitor ORSIS Data for Risk Indicators 


March '08 


MA- C: Establish Controls in ORSIS 


May '08 


MA-A: Implement Revised Procurement Process 


July '08 


MA-H: Incorporate Compliance Into Staff Performance Review 


July '08 


MA-B : Strengthened Written Policies and Procedures 


Sept. '08 


MA-G: Conduct System- wide Training 


Dec. '08 


MA-D: Implement Redesigned Case Review System 


Dec. '08 
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Appendix 1 
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Appendix 2 

BRSSFY04-06 
Management Intervention Highlights 





Host Department: Over the years, state VR services 
have been housed in several different Departments. 


1992-94 DHHS 

1994-96 DOE 
1996 - Present DOL 


SFY 04 


July '03 through June '04 




December 
Uj 


Penny Plourde starts as Director, Division of 
Vocational Rehabilitation 


This Division Director position had been vacant for 
over 3 years. 


March '04 


MDOL Administrative contracts with Barry/Dunn to 
do management review of BRS. 


BRS Director accepts new position. 


May 22, 
2004 


Jill C. Duson (JCD) starts as Director. 


JCD implements 90-day entry plan focused on 
quick assessment of personnel and management 
resources; creation of Bureau Lead Team (BLT) 
structure; clarification of budget status; initiation of 
Keep-Stop-Start meetings with staff in all offices. 

Wait for service is averaging 7 to 8 months. 


SFY 05 


July '04 through June '05 




August '04 


Barry, Dunn report and recommendations issued. 


Prioritized report recommendations ; built 
implementation matrix for Bureau action to 
improve poUcies and operations; prioritized Bureau 
action to improve R-20 payments processing, and 
negotiated timeline with MDOL shared services 
group to document federal drawdown and other 
financial admin, procedures performed for BRS. 


September 
'04 


MDOL Shared Services discloses discrepancy in 
estimate of funds available to support program 
activities in FY' 05. 


JCD implements delay in service commitments to 
current clients and slow down of new client intake 
pending clarification of funds available. All other 
operations issues tabled pending resolution of 
program solvency concerns. 


October 
'04 


MDOL notifies State Controller and RSA of budget 
shortfall estimated between $1 milhon to $2.3 million. 


MDOL request assistance from Controller to 
review shared services investigation and analysis of 
the problem, and to assist with discussion with 
federal partner re: action to avoid program grant 
penalties. BRS releases three financial positions to 
MDOL shared services. 


November 
'04 


MDOL assigns shared services personnel to assess and 
define the cause and scope of the budget shortfall and 
recommend action to avoid recurrence. 


MDOL Shared Services hires new finance analyst 
to be allocated full-time to BRS. Shared services 
continues effort to finalize analysis of the cause and 
extent of the budget shortfall. Current estimate: $2 
to $2.1 million. 




MDOL approves filUng of new position to support 
BRS fiscal analysis and financial management needs 
going forward. 


JCD freezes intake of new clients pending review 
of fiscal status & options with MDOL, the 
Governor's Office and the Legislature, projects that 
waitlist for DVR chents may reach 18 months 
February '05. 
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December 
'04 


Commissioner requests and Governor approves 
inclusion of a supplemental budget request of $2 
million for BRS program services to be submitted for 
consideration by the Legislature. 


BRS continues focus on triage response to client 
service requests. And, is fully engaged with 
faciUtating analysis of treatment of the funding 
request (if approved) by USDOE, the State 
Controller's Office and lead finance staff within 
MDOL Shared Services. 

BRS begins design of MFASIS based financial 
management and variance driven reporting process. 


March '05 


BRS goes forward with statewide staff meeting and 
KSS analysis to identify service improvement and 
quaUty assurance opportunities and gain commitment 
to special projects/task team approaches to achieving 
results. 


Using a variety of Bend The Curve tools and 
methodologies, BRS prioritizes cUent service 
improvement activities and commits to several 
short initiatives: 

Short-term initiatives (6 to 12 months): 

. . . VSM based projects: R-20 process 
improvements; improve/capture of SSA-VR 
reimbursement revenue. 

. . .Special Projects: unbundle and make more 
efficient use of dollars spent on job development 
services; standardize and make more effective use 
of funds committed to self-employment plans; 
evaluate long-term cases for closure. 


April '05 


The Legislature approves the requested 2 million dollar 
supplemental appropriation and the funds became 
available to the Bureau in April '05. 


DVR cHent waiting period for services reaches 14 
months. 

BRS completes initial design and preliminary tests 
of reports in new MFASIS based financial 
management process. 


May '05 


MDOL allocates closure of BRS '05 books and 
development of BRS '06 budget to separate staff 
within its Shared Services Group. 


BRS Ufts freeze on intake of new clients and 
reduces DVR wait list to 12 months. 

BRS implements MFASIS based financial 
management process for SFY '06 with plan for 
quarterly testing and adjustment. 


May '05 


BRS establishes wait list ceiling and management plan. 


BLT sets program goal to reduce the wait list for 
DVR services to 10 months by December '05, and 
implement a sustainable plan to manage the wait 
for service within a range of 4 - 6 months by June 
of '06. 


SFY 06 


July '05 through June '06 




September 
'05 


Implementing Financial Management Protocols. 


The implementation of the new financial 
management process was complicated. BRS began 
transition to an ongoing check-in process based on 
quarterly variance reporting using data from the 
first quarter of the SFY '06 (August - September). 
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October '05 


Further Implementation of BTC tools 


BRS worked with teams implementing the short 
term projects commissioned in May '05 to 
standardize the use of project management tools to 
measure progress and quantify project impacts. 

BRS began incorporating project management 
principles into its work on two long-term (12 to 24 
months) initiatives: 

. . . restructure program incentives and improve the 
rehabihtation rate by tying vendor payments to 
client outcomes; 

. . . re-engineer case review, case management and 
performance expectations. 


October '05 


Re-design case review 


Starting point of development with DVR leaders 

group. 


November 
'05 


Results Based Funding (RBF) — aka Vendor 
Payment for Outcomes 


BRS staff position paper: summary of RBF as 
rolled out in other states; options for developing a 
Maine project. 

BRS developed a substantial body of work to 
support consideration of a comprehensive change in 
how VR compensates community vendors for 
rehabihtation service. 

The consideration of this initiative was given 
highest priority by the BRS Leadership Team, 
generating substantial research and analysis of 
project results and contact with consultants engaged 
in the work with several other state VR programs. 


March '06 


RBF Project Review 


Next generation RBF? Consulting again with other 
states experts, seeking more substantial 
documentation/analysis of improvements in 
outcomes for clients and the impact of project 
variations at different stages of development. BRS 
redid its analysis, attempting to incorporate 
learnings from multi-year data from other states 
into a "next-generation" project design for Maine. 


August '06 


Received word that BRS would likely be subject of 
OPEGA review 




November 
'06 


RBF Stakeholder Meeting 


Project review with experts from other state VR 
programs; national RBF experts; Maine CRP's; 
advocates; consumers and other stakeholders. 


January '07 


"No Go" Decision on RBF 


Bureau management priorities spread too thin for it 
to make sense to add in this major change. 
Decision to hold and reconsider after case review 
re-design is implemented. 


February '07 


Re-design Case review 


Note: decision to test by using new tool on 
OPEGA generated cases. 
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Appendix 3: Flowchart of Case Review Re-design 
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Appendix 4: SESC Pre-Audit Procedure: 



iPRE-AUDIT PROCEDURE IBRS PROCUREMENTS 



INTERNAL CONTROL REVIEW BY SESC OF BRS ORSIS R-20 PAYIVtENTS WHICH ARE PROCESSED IN HFASIS AS BAT(»1 
PAYMENTS AND PAID BY THE STATE TREASURER (Pilot within 30 days & Implement within 90 days) 



FREQUENCY 


BI-ANNUALLY 


FALL SPRING 


LOCATIONS 


AUGUSTA, BANGOR, 

LEWISTON, PORTLAND, 
ROCKLAND, SACO 




NOTIFICATION 


DIRECTOR AND REGIONAL 

MANAGER 


WRITTEN NOTICE ONE WEEK 
PRIOR TO AUDIT COMMENCMENT 


NUMBER OF CASE FILES 
REVIEWED 


20 AT EACH LOCATION 
If more Hian 25% of files indicate 
irregularities, sample With be 
expanded 


RANDOMLY SELECTED 


REVIEW OF 


FISCAL IMPLICATIONS 


MATCHING OF EXPENDITURES TO 

BACK UP DOCUMENTATION; 
EXPENDITURE TO IPE; FISCAL 
SOUNDNESS 


REVIEW OF 


INDIVIDUAL EMPLOYMENT 
PLAN (IPE) 


REVIEW EXPENDITURES TO 
ASSERT REASONABLENESS OF 
EXPENDITURES 


docum=ntat;on 


REVIEW WILL BE 
DOCUMENTED 


MEMO DATED AND SIGNED BY 
INTERNAL SESC AUDITOR WILL BE 
MAINTAINED IN REGIONAL OFFICE 


REPORTS 


A SUMMARY REPORT WILL 
BE ISSUED 


LISTING OVERALL ASSESSMENT 


FINDINGS 


ISSUED FOR: 


LACK OF INTERNAL 
COMTROLS/SEGREGATION OF 
DUTIES 






INADEQUATE SUPPORTING 

DOCUMENTATION 






MISSING APPROVALS ON R-20s 






EXPENDITURES THAT DON'T 
PERTAIN TO IPE AND ARE 

QUESTIONABLE 






INACCURATE CODING 






IS PURCHASE ECONOMICAL 


FINDING 


ISSUED to Management 


WILL BE KEPT IN AUDIT BINDER 

FOR REFERENCE 


?- 1 N J i N G R ~ ii i- ' ' J \\ i L 


BY MANAGEMENT 


WITHIN ONE MONTH 


AUDIT FOLLOW UP 


WITH MANAGEMENT 


DOCUMENTED IN BINDER 
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